On backend, :user param may not arrive, added branch to PermittedParams#user.

During development, this resolved as OpenProject::Users... instead of
::Users on my end, :: helped and doesn't change the meaning.

Starting with 18:15 there is an extra Notifications::WorkflowJob created for
Kathmandu time zone test which fails the change count test.

…ng a storage to a project

https://community.openproject.org/work_packages/53394

…elected-option-while-adding-a-storage-to-a-project

This adds `X-Forwarded-Host` with value `$host:$server_port` and `X-Forwarded-Proto` with value `$scheme` to the sample Nginx configuration.

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.16.2 to 1.16.3.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.16.2...v1.16.3)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [rouge](https://github.com/rouge-ruby/rouge) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/rouge-ruby/rouge/releases)
- [Changelog](https://github.com/rouge-ruby/rouge/blob/master/CHANGELOG.md)
- [Commits](rouge-ruby/rouge@v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: rouge
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 6.1.1 to 6.1.2.
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md)
- [Commits](rspec/rspec-rails@v6.1.1...v6.1.2)

---
updated-dependencies:
- dependency-name: rspec-rails
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

[ci skip]

…-6.1.2

build(deps-dev): bump rspec-rails from 6.1.1 to 6.1.2

build(deps): bump rouge from 4.2.0 to 4.2.1

…16.3

build(deps): bump nokogiri from 1.16.2 to 1.16.3

…ttributes

Allow administrators to override static attributes on work packages and projects

…ilable-assignees

https://community.openproject.org/work_packages/53436

Cleanup docs

- fixed unit tests for storage authentication
- fixed client credentials strategy

Fix/bump gems

#52284 bugfix added into release notes 13.4

…o places

…ations_job_spec

Flaky schedule date alerts notifications job spec

- use only class, not instance in error payload

The translations need to be passed as options, otherwise the load order is not defined correctly.

https://community.openproject.org/work_packages/53422

…ation-code-and-tests

[#53368] add authentication for storage interaction

- added util method for nextcloud headers
- removed nextcloud util tests

- added linter improvements

…fields_for_ldap_user

Feature/53330 disable profile fields for ldap user

…f-already-selected-option-while-adding-a-storage-to-a-project

[#53394] OAuth flow causes loss of already selected option while adding a storage to a project.

…ation-in-files_query

[#53370] updated files query to use new authentication

…Symbols -a`

Switch to double quotes all files not changed by current PRs

This reverts commit a901541, reversing
changes made to e573ca0.

Revert "Merge branch 'dev' into release/13.4"

Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 10.4.18 to 10.4.19.
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.18...10.4.19)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [@types/jqueryui](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jqueryui) from 1.12.21 to 1.12.22.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jqueryui)

---
updated-dependencies:
- dependency-name: "@types/jqueryui"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [rdoc](https://github.com/ruby/rdoc) from 6.6.2 to 6.6.3.1.
- [Release notes](https://github.com/ruby/rdoc/releases)
- [Changelog](https://github.com/ruby/rdoc/blob/master/History.rdoc)
- [Commits](ruby/rdoc@v6.6.2...v6.6.3.1)

---
updated-dependencies:
- dependency-name: rdoc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [appsignal](https://github.com/appsignal/appsignal-ruby) from 3.6.2 to 3.6.3.
- [Changelog](https://github.com/appsignal/appsignal-ruby/blob/main/CHANGELOG.md)
- [Commits](appsignal/appsignal-ruby@v3.6.2...v3.6.3)

---
updated-dependencies:
- dependency-name: appsignal
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

….6.3

build(deps): bump appsignal from 3.6.2 to 3.6.3

build(deps): bump rdoc from 6.6.2 to 6.6.3.1

…n because the activerecord-import gem respects it.

The zdennis/activerecord-import#822 got merged and released
in the activerecord-import 1.6.0 which now respects the ActiveRecord::Base.lock_optimistically
setting.

…ev/types/jqueryui-1.12.22

build(deps-dev): bump @types/jqueryui from 1.12.21 to 1.12.22 in /frontend

…ev/autoprefixer-10.4.19

build(deps): bump autoprefixer from 10.4.18 to 10.4.19 in /frontend

Ensure we look for the global transaction

This reverts commit 40b2bbe, reversing
changes made to b4c6cb1.

Add unit test for appsignal fix

- fixed unit test setup
- removed old usages of connection manager

Set operation and request httpx timeouts.